CVE-2026-78660

The net/http package in the Go programming language contains a vulnerability where the HTTP/2 implementation allows malformed framing-related headers. While these headers do not interfere with HTTP/2 framing, they can be forwarded to an HTTP/1 client when the implementation acts as a reverse prox...